Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/7t0EJr7Qn0Z5Q0u6fXOLK1-Kkd0.roa
File:                     7t0EJr7Qn0Z5Q0u6fXOLK1-Kkd0.roa (raw, json)
Hash identifier:          2y2zy/CI0UD4JEVYZ/bL1oLEMUON7oycm9DvVGv8484=
Subject key identifier:   EE:DD:04:26:BE:D0:9F:46:79:43:4B:BA:7D:73:8B:2B:5F:8A:91:DD
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       02B2273E
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/7t0EJr7Qn0Z5Q0u6fXOLK1-Kkd0.roa
Signing time:             Tue 22 Mar 2022 09:17:12 +0000
ROA not before:           Tue 22 Mar 2022 09:17:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        5.181.161.0/24 maxlen: 24
                          5.181.162.0/24 maxlen: 24
                          5.181.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45229886 (0x2b2273e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Mar 22 09:17:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eedd0426bed09f4679434bba7d738b2b5f8a91dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:af:39:1d:8f:66:69:a1:e3:a3:ce:d7:3b:
                    c3:38:92:2a:ef:f2:a4:56:b0:15:f5:a5:cd:46:cc:
                    9a:56:af:bb:d4:61:a3:2b:71:75:14:12:5d:98:df:
                    f5:1d:5c:37:6d:fb:b0:a7:da:7e:c0:0c:b7:33:ab:
                    94:cc:a3:a2:e5:84:d3:11:fa:c6:07:ff:06:32:39:
                    e8:55:a9:6a:e4:ab:72:9d:d8:e2:74:a6:d6:a4:47:
                    7a:a5:90:93:56:e0:01:fc:20:66:14:63:9b:f7:9d:
                    15:3f:dd:ca:4f:19:85:5b:dd:cf:90:25:4d:5b:5d:
                    c8:10:00:2a:cf:47:66:3a:84:77:e6:59:0b:67:36:
                    ab:50:de:ed:aa:17:e6:03:bb:ba:68:7c:2c:25:5b:
                    25:43:81:a2:df:81:be:d2:b1:46:1b:0d:97:eb:9f:
                    af:8c:e7:ac:6d:2a:8b:a5:84:bf:63:fc:88:83:9f:
                    6f:05:a4:4d:89:8a:e4:6a:26:a1:b3:21:5c:cf:aa:
                    74:78:17:9c:a4:30:59:4c:0e:a7:c4:3f:36:c4:fc:
                    53:f9:e6:f7:1a:15:e8:9e:8c:50:29:64:4e:93:ed:
                    39:d4:ee:20:f1:02:a7:6a:94:47:2a:03:da:b4:28:
                    53:bd:94:fe:c7:73:80:71:75:35:3c:44:29:52:f8:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:04:26:BE:D0:9F:46:79:43:4B:BA:7D:73:8B:2B:5F:8A:91:DD
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/7t0EJr7Qn0Z5Q0u6fXOLK1-Kkd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.161.0-5.181.163.255

    Signature Algorithm: sha256WithRSAEncryption
         78:95:28:f4:ea:21:1b:3f:b0:d7:20:9c:bf:08:11:a8:fa:09:
         55:10:6c:e2:14:f4:3e:b3:f0:0b:35:9a:4d:a8:49:72:eb:fc:
         4b:7a:9d:fa:4c:07:89:06:8c:66:7c:75:25:8f:00:4f:5a:c5:
         ef:8e:e6:da:ed:45:83:36:bc:06:f3:70:42:ea:69:b2:02:ed:
         f4:2e:21:0b:92:8c:b9:6c:e9:80:c7:5e:55:df:fc:8e:af:1c:
         9e:91:47:be:fa:25:6d:af:11:2a:7d:44:cb:ec:b5:39:10:68:
         6f:b3:4c:e7:40:8b:d2:79:cd:17:51:da:9e:01:99:8d:f0:bc:
         7e:d6:5c:3a:81:87:d2:d8:d5:24:95:9b:3c:63:6d:65:20:26:
         55:d1:a9:aa:a2:3f:0d:25:60:34:b9:f3:29:0f:41:a1:d8:2c:
         cf:e7:3f:70:3d:51:69:c1:10:08:cf:ca:cb:6a:88:7f:af:9b:
         df:4d:63:b2:46:f0:0a:20:e6:3c:b9:46:6d:86:bd:d2:62:e9:
         58:33:81:e2:90:95:6c:63:90:35:19:51:50:80:59:00:c4:9f:
         22:81:04:6d:a4:14:42:79:13:64:ea:94:c5:20:18:a9:68:de:
         06:d7:19:86:f5:b7:aa:26:b9:8f:14:51:66:38:b3:dd:02:b0:
         70:1f:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org